General

  • Target

    497ae3f0b585777ba8fdca027c8f55b8700fffd6695a73bb681030d323d1fb54.exe

  • Size

    35KB

  • Sample

    241206-1fnb7symgt

  • MD5

    aa613a8bd25bc214a676cac7f0abedff

  • SHA1

    6bf050d95858ae02be396e8edf26087510d8d5f7

  • SHA256

    497ae3f0b585777ba8fdca027c8f55b8700fffd6695a73bb681030d323d1fb54

  • SHA512

    502873de7479dfc73e92076ec09299f3dfaad4f3e1fed373e85683c4bcdf0c78acd47ab3784a8e525b68cb5c2ec1c0f554ec202fa01436ed396f5746485ed517

  • SSDEEP

    768:K6vjVmakOElpmAsUA7DJHrhto2OsgwAPTUrpiEe7HpBn:J8Z0kA7FHlO2OwOTUtKjpBn

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      497ae3f0b585777ba8fdca027c8f55b8700fffd6695a73bb681030d323d1fb54.exe

    • Size

      35KB

    • MD5

      aa613a8bd25bc214a676cac7f0abedff

    • SHA1

      6bf050d95858ae02be396e8edf26087510d8d5f7

    • SHA256

      497ae3f0b585777ba8fdca027c8f55b8700fffd6695a73bb681030d323d1fb54

    • SHA512

      502873de7479dfc73e92076ec09299f3dfaad4f3e1fed373e85683c4bcdf0c78acd47ab3784a8e525b68cb5c2ec1c0f554ec202fa01436ed396f5746485ed517

    • SSDEEP

      768:K6vjVmakOElpmAsUA7DJHrhto2OsgwAPTUrpiEe7HpBn:J8Z0kA7FHlO2OwOTUtKjpBn

    • Neconyd

      Neconyd is a trojan written in C++.

    • Neconyd family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks